Security
Security posture for institutional procurement.
Security is engineered as a property of the platform, not a deck. The summary below maps to the controls that institutional buyers diligence against.
SOC 2 alignment
The platform is engineered to SOC 2 alignment across security, availability, and confidentiality criteria. Control documentation is shared with operators under NDA during procurement.
Access controls
Role-based access with least-privilege enforcement. Privileged actions are logged immutably and reviewed on a defined cadence.
Secrets and keys
Hardware-backed key storage with documented rotation policy. Operator-controlled keys available in managed deployments where required.
Incident response
Defined severity classification, on-call rotation, and operator communication cadence. Post-incident reviews are shared with operator security and risk teams.
Vulnerability disclosure
Coordinated disclosure programme. Security researchers can reach the team at info@vinfotech.com.
Audit reports, certificates, and detailed control mappings are supplied directly during procurement.
Run a security review.
We are happy to walk through control mappings and deployment topology with your security and risk teams under NDA.